Generic selectors
Exact matches only
Search in title
Search in content
Post Type Selectors
Generic selectors
Exact matches only
Search in title
Search in content
Post Type Selectors

Researchers spot vulnerabilities in Apple iOS

by | May 25, 2021

AppleNew York, (IANS) : An international team of computer science researchers has identified serious security vulnerabilities in the iOS operating system used in Apple’s iPhone and iPad devices.

The vulnerabilities make a variety of attacks possible in Apple devices.

“There’s been a lot of research done on Android’s operating systems, so we wanted to take a closer look at Apple’s iOS,” said William Enck, associate professor of computer science at North Carolina State University and co-author of a paper.

The goal was to identify any potential problems before they became real-world problems, he added.

The researchers focused on the iOS’s “sandbox” which serves as the interface between applications and the iOS.

The iOS sandbox uses a set “profile” for every third-party app.

This profile controls the information that the app has access to and governs which actions the app can execute.

To see whether the sandbox profile contained any vulnerabilities that could be exploited by third-party apps, the researchers first extracted the compiled binary code of the sandbox profile.

They then decompiled the code, so that it could be read by humans.

Next, they used the decompiled code to make a model of the profile, and ran series of automated tests in that model to identify potential vulnerabilities.

The team identified vulnerabilities that would allow them to launch different types of attacks via third-party apps.

Those attacks include methods of bypassing the iOS’s privacy settings for contacts, of learning a user’s location search history and of inferring sensitive information (such as when photos were taken) by accessing metadata of system files.

It also includes methods of obtaining the user’s name and media library and of consuming disk storage space that cannot be recovered by uninstalling the malicious app.

“We are already discussing these vulnerabilities with Apple. They’re working on fixing the security flaws, and on policing any apps that might try to take advantage of them,” Enck noted in a university statement.

0 Comments

Submit a Comment

Your email address will not be published. Required fields are marked *

Recent Posts

India pips US to become 2nd largest 5G mobile market, Apple leads

India pips US to become 2nd largest 5G mobile market, Apple leads

New Delhi: India has overtaken the US to become the world’s second-biggest 5G handset market for the first time, behind China, a report has mentioned. Global 5G handset shipments grew 20 per cent (year-on-year) in the first half of 2024, according to the Counterpoint...

Sale of smartphones worth Rs 1 lakh and above surge in India

Sale of smartphones worth Rs 1 lakh and above surge in India

New Delhi: With disposable incomes rising amid the premiumisation trend, the sales of luxury smartphones have surged in India in recent quarters, industry experts said on Tuesday. The smartphone shipments of Rs 1 lakh and above increased by 20 per cent (year-on-year)...

0 Comments

Submit a Comment

Your email address will not be published. Required fields are marked *